when i try to ssh into my phone this is the error i get
#SSH doesn't work on my phone on ios 14
lunar totem
west dock
when i try to ssh into my phone this is the error i get
What is ssh
lunar totem
What is ssh
just google what it is
glad trail
when i try to ssh into my phone this is the error i get
What jailbreak
glad trail
And is OpenSSH installed?
lunar totem
12 pro max
glad trail
try a userspace reboot if you haven’t and connect again maybe?
lunar totem
try a userspace reboot if you haven’t and connect again maybe?
alr
lunar totem
try a userspace reboot if you haven’t and connect again maybe?
oh also
if i have a very long uptime
would that have an effect
glad trail
It shouldn’t but the system can become somewhat unstable with time technically
lunar totem
same error after userspace reboot
glad trail
A full reboot might be better if your phone’s been on for like weeks
lunar totem
A full reboot might be better if your phone’s been on for like weeks
its been on for about 133 days
glad trail
has SSH ever worked in those 133 days
lunar totem
only wired ssh
when i plug it into my mac it works fine with ssh
second i try wireless
it refuses to connect
glad trail
it could be a configuration issue? not sure
strong temple
can you add -v to the ssh command to get a verbose output
lunar totem
lunar totem
can you add -v to the ssh command to get a verbose output
just did that lmao
like before you sent your message
strong temple
oh, are you trying to ssh to your pc from your phone?
lunar totem
oh, are you trying to ssh to your pc from your phone?
yeah
lunar totem
oh, are you trying to ssh to your pc from your phone?
no
im tryna ssh into my phone from my pc
i just tried with my other phone
with working ssh
strong temple
ahhh okay nvm then
hmm
ssh -oHostKeyAlgorithms=+ssh-rsa [email protected] -v
see if this does anything
lunar totem
same error
lunar totem
yeah ssh is running in mobile
strong temple
what happens if you try logging in as the mobile user instead of root?
strong temple
just ah as in i didn't think that would work anyway
lunar totem
just ah as in i didn't think that would work anyway
oh
glad trail
/var/jb doesn’t sound right here to me personally for iOS 14 
Do these paths exist on the device?
Try to ls /var/jb/root/var/.ssh
I’m probably wrong
lunar totem
i dont see a jb folder in var
strong temple
what repos do you have added
lunar totem
these
glad trail
Make sure you’re downloading OpenSSH from Procursus
lunar totem
Make sure you’re downloading OpenSSH from Procursus
yeah i did
glad trail
That’s weird.
lunar totem
is this normal
glad trail
It should be? Looks correct to me
strong temple
no, wait
that error is reading the keys from the phone
i assume your other phone is jailbroken rootless
lunar totem
yes
strong temple
can try an even older algorithm i guess ssh -oKexAlgorithms=+diffie-hellman-group14-sha1 [email protected]
just double check if the ip is the same
and it hasn't changed on the phone
glad trail
default key algorithm should work since iOS 14 isn’t that old
lunar totem
should i send over my sshd_config file
glad trail
I have no clue what’s wrong there
Weirdly I had the same issue on an iPhone 5 I jailbroke with Socket recently
strong temple
might as well send it
lunar totem
lunar totem
I have no clue what’s wrong there
Weirdly I had the same issue on an iPhone 5 I...
oh
how'd you fix it
or is it still broken
glad trail
or is it still broken
Still is I just used SSH over USB lol
lunar totem
Still is I just used SSH over USB lol
yeah thats what i have to do rn
strong temple
it's weird because the error you sent earlier implied ssh was working fine
strong temple
this one
lunar totem
it's weird because the error you sent earlier implied ssh was working fine
should i put pubkeyauthentication back to yes
yeah after doing that i just get permission denied
strong temple
only thing i can think of is regenerating host keys via ssh-keygen -A then restarting sshd
lunar totem
only thing i can think of is regenerating host keys via `ssh-keygen -A` then res...
how do i do that?
like how do i restart sshd
uhh
strong temple
launchctl stop sshd
lunar totem
doing launchctl reboot sshd
just made my phone go black
oh thank god
thought i fucked it up
it just kernel panicked
strong temple
yeah launchctl reboot reboots the device lol
strong temple
you shouldn't need to
lunar totem
same error
glad trail
Maybe start sshd in debug mode?
launchctl stop sshd
then
sshd -D
it should show debug logs and such as stuff tries to connect
lunar totem
says no hostkey available
strong temple
this needs to be done on the ios 14 phone
lunar totem
glad trail
no that checks out
lunar totem
this needs to be done on the ios 14 phone
yeah i did
strong temple
oh i thought the 12 pro was the one jailbroken rootless
lunar totem
oh i thought the 12 pro was the one jailbroken rootless
no my 12 pro max is
glad trail
ssh-keygen should have generated host keys though
strong temple
no my 12 pro max is
oh oops
lunar totem
glad trail
Wait no I know the issue
glad trail
do
sudo su
Then
/usr/sbin/sshd -D
lunar totem
it did nothing now
glad trail
it did nothing now
try connecting
lunar totem
nothing
glad trail
same error or is sshd just not showing anything on the phone
lunar totem
same error or is sshd just not showing anything on the phone
both
glad trail
wtf
strong temple
to sanity check can you ssh from your pc to your rootless device
just use mobile as the user instead
lunar totem
yeah
strong temple
man
lunar totem
tf is this
strong temple
yeah that's normal, it happens the first time you open a terminal on jailbroken ios
lunar totem
oh
strong temple
1 gives you all of the zsh features but if you aren't using the terminal after this you can just q
lunar totem
1 gives you all of the zsh features but if you aren't using the terminal after t...
oh ok
lunar totem
1 gives you all of the zsh features but if you aren't using the terminal after t...
is there any way to fix ssh on my iphone 12 pro?
strong temple
idk i'm gonna ping <@&355177530061357057> because there is so little documentation on ios ssh issues it would be worth trying to figure this out
lunar totem
oh ok
dreamy dock
strong temple
situation: ios 14 device jailbroken with taurine, ssh refusing to connect
lunar totem
wow lots of people are responding
uneven carbon
have they tried a different network
uneven carbon
ive tried my other internet
What about turning off private IP address in Wi-Fi settings
cerulean maple
post the latest error please
lunar totem
strong temple
it's not a network or firewall error as they can connect to a rootless device
lunar totem
What about turning off private IP address in Wi-Fi settings
same error
cerulean maple
do you want to use keys or do you want to use password auth
lunar totem
do you want to use keys or do you want to use password auth
password auth
im fine with either
cerulean maple
hm
strong temple
config is here but i think PubKeyAuthentication Yes is on
lunar totem
config is here but i think PubKeyAuthentication Yes is on
it is
and when i turn it off
i get this error
cerulean maple
if you turn that off then you have no authentication methods
does the /etc/ssh/sshd_config.d/ folder exist
lunar totem
lunar totem
can you upload it
i already did
cerulean maple
no changes from that?
strong temple
eh just upload the current one anyways
cerulean maple
what happens if you try sshing into mobile
cerulean maple
can you run with -vvv
basically trying to see if the server ever offers password auth
lunar totem
wait did my screenshots send
lunar totem
you wanna take the easy way out or do you wanna fix password auth
id rather fix password auth
since if anyone else has this issue
there will be people able to find a solution easier
cerulean maple
thats fair
lets do two things
- enable logging to file
- change logging level to debug
for 1. let's find out where the launch daemon plist is
lunar totem
lets do two things
1. enable logging to file
2. change logging level to debug
how do i do that?
cerulean maple
i assume you have a terminal app installed
lunar totem
for 1. let's find out where the launch daemon plist is
yeah i have com.apple.terminal
cerulean maple
aight
grep -rF sshd /System/Library/LaunchDaemons /Library/LaunchDaemons
it should be in one of these places
lunar totem
cerulean maple
nice
so it's the one in /Library/LaunchDaemons/com.openssh.sshd.plist
open that up
lunar totem
so it's the one in /Library/LaunchDaemons/com.openssh.sshd.plist
in filza or terminal
cerulean maple
tbh whatever is easier for you we're gonna edit the file
cerulean maple
so in the program arguments list, at the end we shall add
hm
lets put it in tmp
-E
/tmp/sshd.log
-E is one item
the path is another item
lunar totem
lets put it in tmp
add that as an item?
cerulean maple
yea so Item 3 is -E and Item 4 is the file path
lunar totem
like this right?
lunar totem
alr
cerulean maple
step 2 is easy
in sshd_config change the LogLevel from INFO to DEBUG
step 3 userspace reboot
then try connecting again, and after it fails, check /tmp for the log
lunar totem
step 2 is easy
in sshd_config change the LogLevel from INFO to DEBUG
ok
done
brb
back
a
lunar totem
step 2 is easy
in sshd_config change the LogLevel from INFO to DEBUG
well now its not letting me send it
says permission denied
cerulean maple
the log file?
lunar totem
the log file?
yeah
cerulean maple
are you grabbing it from filza or?
lunar totem
are you grabbing it from filza or?
what should i do
cerulean maple
try copying it from terminal
sudo chown mobile:mobile /var/mobile/sshd.log
remove sudo if your terminal is logged in as root
lunar totem
wait
i have it in my notes app
lemme grab my mac rq so i can send it
@cerulean maple i got it
lunar totem
oh ok
lunar totem
try `DEBUG3` for log level
do i reboot userspace after doing that
cerulean maple
if you don't see debug3 in logs after trying to connect again, do a userspace reboot
lunar totem
i see debug3
also im going to the apple store in a bit
since i have to fix a seperate thing
cerulean maple
its ok im honestly out of ideas
lunar totem
oh ok
cerulean maple
maybe completely uninstall and reinstall openssh-server or something
or restore rootfs
lunar totem
or restore rootfs
im too lazy to setup all my tweaks again
cerulean maple
worst case just use pub key auth
lunar totem
worst case just use pub key auth
oh ok
cerulean maple
there should be a file like this but called id_rsa.pub, copy this to /var/root/.ssh/authorized_keys
for pub key auth
lunar totem
there should be a file like this but called id_rsa.pub, copy this to /var/root/....
oh ok
lunar totem
there should be a file like this but called id_rsa.pub, copy this to /var/root/....
theres no id_rsa in this folder
cerulean maple
oh
you'll need to make an ssh key then
github has a tutorial for it, i've gotta go do some other work
lunar totem
github has a tutorial for it, i've gotta go do some other work
this?
cerulean maple
that works
cerulean maple
you can use the same keys or you can generate new ones
lunar totem
oh ok
cerulean maple
if you use the same keys, copy id_ed25519 and id_ed25519.pub to ~/.ssh on mac
lunar totem
there should be a file like this but called id_rsa.pub, copy this to /var/root/....
root doesnt have a .ssh folder
cerulean maple
make one
lunar totem
alr
cerulean maple
you'll need to set the perms on it to 600 or something
chmod 600 /var/root/.ssh/authorized_keys should work
lunar totem
how do i do that?
lunar totem
```chmod 600 /var/root/.ssh/authorized_keys``` should work
oh ok
cerulean maple
you can also do it with filza
r/w on owner, nothing on group and everyone
its been a while so i forgot what the filza ui looks for it honestly
lunar totem
its been a while so i forgot what the filza ui looks for it honestly
both folders?
or just authorized_keys
cerulean maple
maybe r/w/x (700) on the .ssh folder itself
lunar totem
maybe r/w/x (700) on the .ssh folder itself
i added the public keys but its still not working
cerulean maple
still pubkey denied?
lunar totem
yeah
lunar totem
ssh [email protected]?
yeah thats exactly what im doing
lunar totem
```/var/root/.ssh/authorized_keys``` is a file
ohhhh
cerulean maple
inside is the contents of id_ed25519.pub
its basically a list of all the (public) keys allowed to ssh
lunar totem
inside is the contents of id_ed25519.pub
do i restart sshd now?
cerulean maple
shouldnt need to
cerulean maple
id_ed25519 exists in c:/users/something/.ssh?
lunar totem
yes
lunar totem
'
lunar totem
did you set the perms on authorized_keys?
yeah
cerulean maple
Authentication refused: bad ownership or modes for file /private/var/root/.ssh/authorized_keys
debug3: Ignored authorized keys: bad ownership or modes for file /private/var/root/.ssh/authorized_keys
d```
can you check in terminal?
ls -lsall /private/var/root/.ssh/authorized_keys
cerulean maple
or click back here and take a screenshot
lunar totem
lunar totem
change to root and wheel, respectively
i changed it to root and root and it started working
cerulean maple
technically supposed to be wheel, but also works
cerulean maple
